Verdict.RuleEngine.EntityFrameworkCore

EF Core implementation of . Targets are stored as plain JSON.

Initializes the store.

Context. Options (four-eyes). Time. Logger.

Replaces the definition of an existing version in place (targets are re-protected). Non-draft versions are immutable — create a new draft instead.

Connector id (must match ). Draft version number. New definition content. Who edited. Cancellation token. The version does not exist. The version is not a draft.

Deletes a version together with its recorded exchanges. Any other state is refused — retire published versions through Deprecated/Archived transitions instead. Removing the last version also removes the connector itself.

Connector id. Draft version number. Who deleted. Cancellation token. The version does not exist. The version is not a draft.

EF Core implementation of (table contract_schemas).

Initializes the store.

Context. Time.

EF Core implementation of : versioning, lifecycle state machine, four-eyes publishing, validation-on-publish, canonical hashing, audit log, test runs and append-only traces.

Initializes the store.

Context. Validator (re-run on Validated/Published transitions). Contract store. Connector definition store. Options (four-eyes). Time. Logger.

Creates a new draft version by copying the content of an existing version (the "re-publish" / rollback flow: published rows never change, a new row is published instead).

Ruleset id. Version to copy. Author of the new draft. Change notes. Cancellation token.

Replaces the document of an existing version in place. Published (and any other non-draft) versions are immutable — edit them by creating a new draft instead ().

Ruleset id (must match ). Draft version number. New document content. Who edited. Optional change notes (kept unchanged when ). Cancellation token. The version does not exist. The version is not a draft.

Deletes a version. Any other state is refused — published history is immutable; retire versions through Deprecated/Archived transitions instead. Removing the last version also removes the ruleset itself.

Ruleset id. Draft version number. Who deleted. Cancellation token. The version does not exist. The version is not a draft.

Serializes a trace for storage (canonical JSON).

Trace.

Deserializes a stored trace.

JSON.

Lifecycle surface shared by ruleset and connector version rows (used by the shared versioning machinery).

State.

Updated (UTC).

Approver.

Published (UTC).

Deprecated (UTC).

rule_engine.rulesets.

Ruleset id.

Display name (from the latest saved draft).

Created (UTC).

Versions.

rule_engine.ruleset_versions. Rows in state ≥ Published are immutable (enforced by interceptor).

Ruleset id.

Version.

State.

Canonical DSL document (JSON).

SHA-256 hex of .

Contract id.

Contract version.

Change notes.

Author.

Approver.

Created (UTC).

Updated (UTC).

Published (UTC).

Deprecated (UTC).

Concurrency token (SQL Server rowversion; ignored on PostgreSQL where xmin is used).

Owning ruleset.

rule_engine.ruleset_test_runs.

Id.

Ruleset id.

Version.

Input (JSON).

Result (JSON).

Who.

When (UTC).

rule_engine.execution_traces. Append-only (enforced by interceptor).

Id.

Ruleset id.

Version.

Correlation id.

Mode.

Outcome.

Hard fail.

Score.

Trace (JSON).

Elapsed milliseconds.

When (UTC).

rule_engine.connectors.

Connector id.

Name.

Kind.

Created (UTC).

Versions.

rule_engine.connector_versions. Targets are stored as plain JSON (kind-specific; no encryption at rest — see CLAUDE.md §14 #5). DB targets are never returned to API clients; API base URLs are non-secret and are returned.

Connector id.

Version.

State.

Definition without targets (JSON).

Production target JSON, stored in plain text.

Test target JSON, stored in plain text.

Author.

Approver.

Created (UTC).

Updated (UTC).

Published (UTC).

Deprecated (UTC).

Concurrency token (SQL Server rowversion; ignored on PostgreSQL).

Owning connector.

rule_engine.recorded_exchanges.

Connector id.

Version.

Operation.

Parameter hash.

Response (JSON).

Description.

Created (UTC).

rule_engine.contract_schemas.

Contract id.

Version.

Fields (JSON array).

Created (UTC).

rule_engine.audit_log. Append-only.

Id.

Actor.

Action (e.g. SaveDraft, Transition).

Entity type (ruleset, connector).

Entity id (id@vN).

Source state.

Target state.

When (UTC).

Details (JSON).

Enforces immutability of published versions in the database layer: once a ruleset or connector version is in state ≥ Published, only lifecycle fields (state, approver, published/deprecated timestamps, updated_at, concurrency token) may change and the row may not be deleted.

Blocks updates/deletes on execution traces and audit, and updates to historical test-run evidence.

EF Core context of the rule engine (schema rule_engine, snake_case names set explicitly so both providers produce identical identifiers). One provider is active at a time, selected at startup; the few provider-specific mappings — JSON column types (jsonb vs nvarchar(max) + ISJSON) and concurrency tokens (xmin vs rowversion) — branch on Database.ProviderName inside . EF Core caches the model per provider (each provider gets its own internal service provider), so no further plumbing is needed.

Database schema.

Annotation marking a property as a JSON document column.

Migrations history table name.

Initializes the context.

Options.

Rulesets.

Ruleset versions.

Test runs.

Execution traces.

Connectors.

Connector versions.

Recorded exchanges.

Contract schemas.

Audit log.

Whether a property is a JSON document column.

Property.

PostgreSQL: JSON columns as jsonb; xmin as concurrency token (the row_version column is not mapped).

SQL Server: JSON columns as nvarchar(max) with ISJSON check constraints; rowversion concurrency tokens.

The versioning machinery shared by and : draft-only guards, four-eyes enforcement, transition side effects, audit rows and the concurrency-wrapped save. Both aggregates follow the same lifecycle — changing a rule here changes it for both.

Refuses any operation on a non-draft version (published history is immutable).

Current state. id@vN label. What was attempted (edited / deleted). Sentence telling the caller what to do instead.

Enforces four-eyes publishing: the approver must differ from the author.

Target state. Options (the check applies only when ). Actor performing the transition. Author of the version. Display label, e.g. Ruleset rs-x@v1.

Applies a validated transition's side effects: state, timestamps, approver.

Version entity. Target state. Actor (recorded as approver when publishing). Current time (UTC).

Adds an audit row (append-only).

Context. Time. Actor. Action (SaveDraft, Transition, …). Entity type (ruleset / connector). id@vN label. Source state. Target state. Extra details (JSON).

Saves, translating optimistic-concurrency failures into .

Context. Message for the conflict exception. Cancellation token.